Description
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "Contacts" component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
vincedes3/CVE-2017-2368 ★ 0 · Aug 18, 2017
CVE-2017-2368 VCF Message App Crash Bug
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 95722 vdb-entry
- https://support.apple.com/HT207482
- 1037668 vdb-entry